4 ms·
Yes, we are incorporating strace-based dynamic analysis (containerized) to collect system calls. However, Packj can currently flag use of getattr() API as it i
by ashishbijlani 4y ago
Yes, we are incorporating strace-based dynamic analysis (containerized) to collect system calls. However, Packj can currently flag use of getattr() API as it is equivalent to "runtime code generation" [1]; a developer can go and take a deeper look then.
1. https://github.com/ossillate-inc/packj/blob/main/main.py#L476 https://github.com/ossillate-inc/packj/blob/main/main.py#L47...